This notice explains how GFC TRAVEL uses information from website visitors, people requesting journeys and drivers enquiring about work.
1. Who is responsible and how to contact us
GFC TRAVEL is responsible for the personal information it collects for its enquiries, journey arrangements and driver network. Contact gfctraveluk@gmail.com or 0151 272 3461 for privacy enquiries or rights requests. The contracting operator’s full identity and business address must be provided before a booking is accepted.
2. Information we collect
- Journey enquiries: your name, email, telephone number, pickup and destination addresses, journey dates and times, passengers, luggage, optional flight details, return journey and notes.
- Booking administration: your reference, quote, status, assigned driver, payment status, communications and confirmation records.
- Driver enquiries: first and last name, licensing council, email and telephone number. If we subsequently request licensing or vehicle information or documents for onboarding, we explain what is needed for that process.
- Technical information: hosting and security providers may process IP addresses, request times, browser and device information, security logs and essential session information.
We usually receive information from you. Someone booking on behalf of passengers may supply their information, and a driver may provide journey or payment updates. If you book for another person, tell them about this notice and provide only the information needed.
3. Why we use information
We use contact and journey details to respond to enquiries, check availability, quote, arrange and administer journeys, and provide service updates. Where you are the customer, this is necessary to take steps at your request before a contract and to perform that contract. Handling a driver’s enquiry about a proposed working arrangement may also involve those pre-contract steps.
We use information where necessary to meet applicable licensing, safeguarding, accounting, tax and other legal obligations. Our legitimate interests include coordinating travel for passengers booked by someone else, handling complaints, preventing fraud and abuse, protecting the website and maintaining appropriate business records. We consider the impact on individuals when relying on these interests. If a separate optional use needs consent, we ask for it specifically.
Name, contact and basic journey information are needed to respond to or arrange a booking; without them we may be unable to proceed. Optional notes and flight information need only be provided where relevant.
4. Who receives information
We share relevant pickup, destination, timing, passenger and contact details with the allocated driver, and with another appropriately licensed operator where a lawful, agreed arrangement requires it. Website hosting, database, storage and security infrastructure is provided through OpenAI Sites and Cloudflare. Email and communication providers process correspondence; you can also choose to contact us through WhatsApp, operated by Meta.
When online payments are offered, SumUp processes payment details under its own privacy information; our records contain checkout references, amounts and payment status rather than full card details. If automatic email is enabled, the delivery service, currently configured in the application for Resend, processes the recipient address and confirmation content. These optional services receive data when used, rather than merely because you visit this page.
Information may also be disclosed to the licensing authority, police, regulators, insurers, accountants or professional advisers when necessary and lawful. We do not sell customer information or use the booking form to enrol you in marketing.
5. International processing
Technology and communication providers may process information outside the UK. Where a restricted international transfer takes place, a valid transfer mechanism is required, such as applicable UK adequacy regulations or approved contractual safeguards. Contact us for information about the providers, locations and safeguards relevant to your information. Provider privacy notices also explain their own processing.
6. Keeping information
Retention depends on the record and purpose. We consider whether an enquiry is still active, whether a journey or working arrangement has ended, the booking-record periods required by the operator’s licence, accounting and tax requirements, and whether records remain necessary for complaints, insurance or legal claims. Information no longer needed should be deleted or anonymised; unresolved disputes or a legal requirement may justify longer retention. Contact us about the retention of a particular record. Deletion is reviewed by the operator and is not triggered automatically by cancelling a journey.
7. Security and private journey links
The site uses HTTPS, restricted administrative access and private links for customer journey pages. A private journey link acts as an access key to that journey: keep it secure and share it only with people you trust. You do not need a ChatGPT account to request or view your journey using that link. Operator sign-in is separate. No online system can guarantee absolute security.
8. Cookies and external services
The application does not currently include advertising pixels or optional analytics trackers. Hosting, security and operator sign-in services may use essential cookies or similar technology to deliver and protect the service. External WhatsApp and payment pages apply their own privacy and cookie information when you open them. If optional trackers are introduced, this notice and any required choice controls must be updated before they run.
9. Children and sensitive information
Parents, guardians or authorised organisations should arrange school transport and supply only necessary passenger information. The website is not intended for children to submit their own bookings. Please do not include medical diagnoses, identity documents or criminal-record information in general enquiry notes. Discuss any necessary accessibility or safeguarding information with us separately so the appropriate protections and lawful conditions can be considered.
10. Your rights and complaints
Depending on the circumstances and legal basis, you may request access, correction, deletion, restriction or portability of your information. You can object to processing based on legitimate interests, including on grounds relating to your circumstances. Where we rely on consent, you can withdraw it without affecting earlier lawful processing. Some information may need to be retained to meet legal obligations or deal with claims.
Email us to exercise a right. We may need proportionate identity checks and will respond within the applicable legal time limit, normally one month, explaining any permitted extension. You may complain to the Information Commissioner’s Office (ICO) if you are unhappy with how your information is handled. You can contact us first, but do not have to do so.
11. Decisions and updates
The operator reviews journey and driver enquiries. We do not use solely automated decision-making that has legal or similarly significant effects. This notice may be updated as the service changes; the revision date appears above.